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DETAILED ACTION 

A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1.17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1.17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on 
November 1 , 2007 has been entered. 

Claims 1 , 3-20, 22-25, 27-32, 34 and 35 are pending. Claims 2, 21 , 26, and 33 are 
cancelled. Claim 35 is new. 

Claim Rejections - 35 USC § 112 

The 1 12 rejections have been overcome and are withdrawn. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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Claims 1, 4-6, 8-20, 23-25, and 27-32 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Ohta et al. (US 2002/0083317) herein Ohta, and further in 
view of Tardo (US 7,082,534). 

Claims 1, 10, 13, 14, 15, 16, 18, 19, 20, 25, 32 disclose (Currently Amended) a 
processor, comprising: 
a crypto unit comprising: 

a cipher core configured to cipher data received; (Ohta Figure 12 and associated 
text show a plurality of cipher cores (303a and 303b) and a plurality of authentication 
buffers (304a and 304b)) 

a plurality of processing contexts each configured to process at least one data 
packet at a time and to store cipher keys and algorithm context associated with 
processing the at least one data packet (Paragraph [0012] teaches plural cipher 
processing units and paragraph [0046] teaches different cipher algorithms used to 
encrypt/decrypt the data. This would correspond to the "plurality of processing 
contexts"^ 

Ohta teaches authentication cores configured to authenticate the ciphered data 
in Figure 12, Authentication Processing Unit 305a and 305b and associated text in 
paragraph [0104] Ohta does not teach but Tardo teaches, at least two authentication 
cores each implementing a different authentication algorithm as shown in Figures 2 and 
3 and explained in column 4 lines 48-67 through column 5 lines 1-36. Figure 2 shows 2 
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authentication engines MD5 225 and SHA1 227. Figure 3 and associated text teach 
choosing the authentication engine based on the encryption as in column 5 lines 25-29. 
It would be obvious to one of ordinary skill in the art at the time of invention to use 2 
different authentication algorithms of Tardo in two different authentication cores of Ohta. 
The motivation to combine would be that in paragraph [0046] of Ohta it states that the 
authentication algorithm includes HMAC-MD5-96 and HMAC-SHA-1-96. Therefore, as 
shown in Ohta the authentication cores include different algorithms); and 

an authentication buffer configured to store the ciphered data and provide the 
ciphered data to the authentication cores each in an amount based on the 
corresponding authentication algorithm implemented. (Ohta Figure 12, Data 
Accumulation Unit 304a and 304b; paragraph [0011] states "a data block accumulation 
unit that outputs the accumulated amount to the authentication processing unit when it 
reaches the smallest data block size for the authentication processing") 

wherein the authentication buffer comprises a number of buffer elements 
corresponding to a number of processing contexts (Figure 12 shows two buffers and 
two authentication processing units). 

Claims 4, 23, 28 disclose (Currently Amended) the processor according to claim 1, 
wherein each of the buffer elements stores data for a respective one of the processing 
contexts (Figure 12 and associated text show a corresponding number of data block 
accumulation units to encryption processing units). 
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Claim 5 discloses (Currently Amended) the network processor according to claim 4, 
wherein the buffer elements have a size that is at least as large as a largest 
authentication algorithm block size implemented by the authentication cores (Ohta 
Figure 12, Data Accumulation Unit 304a and 304b; paragraph [0011] states "a data 
block accumulation unit that outputs the accumulated amount to the authentication 
processing unit when it reaches the smallest data block size for the authentication 
processing"). 

Claim 6 discloses (Currently Amended) the processor according to claim 1, wherein the 
crypto unit further comprises a plurality of cipher cores, and a plurality of authentication 
buffer elements (Figure 12 and associated text show a plurality of cipher cores (303a 
and 303b) and a plurality of authentication buffers (304a and 304b)). 

Claim 8 discloses (Currently Amended) the processor according to claim 6, wherein 
one of the authentication cores processes data in 16-byte blocks and another one of the 
authentication cores processes data in 64-byte blocks. (The rejection of claim one 
above and also, paragraph [0016] teaches outputting blocks of data to the encryption 
and authentication processors in multiples of 8 bits, which would include all processor 
blocks in claims 8 and 9.) 

Claim 9 discloses (Currently Amended) the network processor according to claim 8, 
wherein one of the cipher core cores processes data in 8-byte blocks and another one 
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of the cipher cores processes data in and/or 16-byte blocks. (The rejection of claim one 
above and also, paragraph [001 6] teaches outputting blocks of data to the encryption 
and authentication processors in multiples of 8 bits, which would include all processor 
blocks in claims 8 and 9.) 

Claim 11 discloses the method according to claim 10, further comprising ciphering data 
received in a first one of a plurality of cipher cores to form the ciphered data (Figure 12 
and associated text show a plurality of cipher cores (303a and 303b) and a plurality of 
authentication buffers (304a and 304b). 

Claim 12 discloses (Currently Amended) the method according to claim 10, further 
comprising ciphering data received using a first one of a plurality of cipher algorithms to 
form the ciphered data (Tardo Figure 2, DES 221 and AES 223). 

Claims 17, 30, 31 disclose (Currently Amended) the method according to claim 10, 
further comprising determining whether data is to be ciphered (Ohta paragraph [0046], 
processing contexts). 

Claims 24, 29 discloses (Original) the device according to claim 20, wherein the device 
includes one or more of a router, network switch, security gateway, storage area 
network client, and server (Paragraph [0089] teaches a router, firewall, and security 
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gate connecting plural computers. This is equivalent to the hardware devices 
mentioned in claims 20, 24, and 29). 

Claim 7 is rejected under 35 U.S.G. 103(a) as being unpatentable over Ohta et 
al. (US 2002/0083317) and Tardo (US 7,082,534), and further in view of Corder (US 
7,069,447). 

Ohta and Tardo teach claims 1 and 6 of the current application which claim 7 
depends from as shown above. It however, does not teach a connection using a 
multiplexer device. Ohta teaches connections using a data path connection switching 
unit as in paragraph [001 3]. 

Corder teaches authentication and encryption buffers and units connected with a 
multiplexer in column 7 lines 1-21. 

In Ohta paragraph [0129] it teaches that the data path connection switching unit 
is used to provide various paths flexibly combined to fully take advantage of the multiple 
units. Therefore it would be obvious to one of ordinary skill in the art at the time of 
invention that this same inherent property of a multiplexer would be an alternate choice. 

Claims 3, 22, 27, 34, and 35 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Ohta et al. (US 2002/0083317) and Tardo (US 7,082,534), and 
further in view of Yoaz et al. (6,697,932) herein referred to as Yoaz. 
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Claims 3, 22, 27, 34, and 35 disclose (Currently Amended) the processor according to 
claim 1, wherein the plurality of processing contexts (Ohta Figure 12 and associated 
text show a corresponding number of data block accumulation units to encryption 
processing units). 

Ohta does not teach processing contexts are configured to allow latency of 
loading cryptographic key material and packet data to be hidden bv pipelining loading of 
the packet data and the key material into a first portion of the plurality of processing 
contexts with processing of the packet data in a second portion of the plurality of 
processing contexts . 

Yoaz teaches processing contexts are configured to allow latency of loading 
cryptographic key material and packet data to be hidden bv pipelining loading of the 
packet data and the key material into a first portion of the plurality of processing 
contexts with processing of the packet data in a second portion of the plurality of 
processing contexts (column 3 lines 57-67). 

It would be obvious to one of ordinary skill in the art at the time of invention was 
made to use pipelining to hide the latency of data within the Ohta system, since Yoaz 
states at column 3 lines 57-67 "this invention minimizes the stall time caused by waiting 
for missing data" for example the authentication buffer in Ohta. 
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Response to Arguments 

Applicant's arguments filed November 1 2007 have been fully considered but 
they are not persuasive. 

Applicant states that Ohta does not disclose processing contexts as disclosed in 
claim one. The Examiner respectfully disagrees. The Applicants statements refer to 
the prior objection of application 10/749,913. As shown above, The Examiner interprets 
the processing contexts to be processing units 303a, 303b, 305a and 305b. Ohta states 
in paragraph [0105] that the processing units output the data block by block while 
encrypting and authenticating. The Examiner has further clarified the rejection based 
on Ohta. 

Conclusion 

The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Nicole M. Young whose telephone number is 571-270- 
1382. The examiner can normally be reached on Monday through Friday, alt Fri off, 
8:00am-5:30pm. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



NMY 

12/19/2007 
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